Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/mYkOBOIW6O0A_6f02CFpHtKOt7g.roa
File: mYkOBOIW6O0A_6f02CFpHtKOt7g.roa (raw, json)
Hash identifier: 0X1xM3PVCNQFuvE7pmgCYP4TDDJw4nRptQ2zO5w8sJA=
Subject key identifier: 99:89:0E:04:E2:16:E8:ED:00:FF:A7:F4:D8:21:69:1E:D2:8E:B7:B8
Certificate issuer: /CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d
Certificate serial: 01A12D458FA2A626E9F17A4A18F749F3443A
Authority key identifier: 4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/mYkOBOIW6O0A_6f02CFpHtKOt7g.roa
Signing time: Sun 11 Oct 2026 23:21:35 +0000
ROA not before: Sun 11 Oct 2026 23:21:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12083
IP address blocks: 9.175.0.0/18 maxlen: 24
135.137.128.0/17 maxlen: 24
153.58.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft
rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 17:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2d:45:8f:a2:a6:26:e9:f1:7a:4a:18:f7:49:f3:44:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d
Validity
Not Before: Oct 11 23:21:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=99890e04e216e8ed00ffa7f4d821691ed28eb7b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f1:fe:23:95:48:31:bd:c5:55:87:5c:2d:87:
6d:31:7b:95:da:a8:b3:8f:43:8e:de:f9:10:bc:75:
5f:09:29:97:61:90:c5:be:6d:aa:29:7e:bc:e4:fd:
eb:c7:0f:b4:9e:ce:42:62:fa:b3:23:96:38:c0:63:
c5:95:b4:8b:06:62:dd:fb:35:27:ee:6d:08:31:33:
8d:ca:08:98:9e:4b:07:91:32:94:56:27:71:1b:42:
ee:34:4b:08:41:26:e8:cd:6e:b8:df:f3:dd:07:53:
4e:70:25:9a:36:8c:8f:6c:be:a7:d1:89:51:f7:41:
b7:d4:8f:90:4d:96:8f:64:26:72:af:46:7d:89:76:
17:d6:a1:39:28:db:a8:a7:04:33:33:62:a2:c1:52:
5a:83:7b:09:f4:56:4c:ec:a1:44:28:02:d9:de:20:
a8:57:6c:70:6a:0a:07:dc:2e:4c:ce:8a:1c:13:0b:
76:12:28:1b:af:bf:20:45:6c:a0:0d:1d:9c:c4:9f:
a4:4b:a1:05:a1:43:66:51:47:3d:bb:90:e9:65:a3:
a7:7e:05:d9:ff:b4:3c:ac:4d:93:76:ee:a7:88:cf:
4c:fc:e2:99:2a:10:46:c7:38:4e:fb:24:43:a3:60:
bd:b5:64:b2:c0:ef:b1:09:bb:3c:5a:7b:42:36:97:
e9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:89:0E:04:E2:16:E8:ED:00:FF:A7:F4:D8:21:69:1E:D2:8E:B7:B8
X509v3 Authority Key Identifier:
keyid:4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/mYkOBOIW6O0A_6f02CFpHtKOt7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
9.175.0.0/18
135.137.128.0/17
153.58.128.0/17
Signature Algorithm: sha256WithRSAEncryption
70:6b:78:71:2d:8d:89:28:bb:0c:b6:9d:af:31:96:34:4a:9d:
26:16:1c:14:a2:9f:8e:af:59:d5:45:7f:e0:07:7e:bc:99:26:
b4:27:dd:34:f1:1e:93:e2:06:2d:44:df:af:97:dc:db:4e:0c:
e1:80:6f:f0:c5:f9:cc:f4:2c:97:6f:6c:fc:f8:b1:f3:c0:86:
bf:ac:86:e3:9e:ca:c3:ae:48:97:03:16:13:0e:06:e3:50:70:
38:c6:b1:4e:5a:4f:ad:0f:ae:aa:4c:e7:9f:d7:4e:b9:c0:a7:
2d:c3:a3:a5:14:fe:a4:17:9d:2e:3f:c6:f4:11:d9:86:48:23:
c5:5a:0b:ca:24:c5:07:7d:68:d3:cc:b7:6c:c7:29:8d:b3:1c:
9d:e5:0e:01:ef:5a:73:49:21:65:f0:22:46:31:62:3a:39:3f:
78:dd:df:f6:55:9a:56:ec:74:ea:98:25:3c:6e:d1:a5:df:6b:
b2:c6:9e:14:10:80:3e:74:9f:e2:79:41:e6:de:e9:b5:e3:55:
ba:d9:c6:39:9f:99:c7:c2:0f:2f:e5:c8:2c:33:cc:17:39:93:
c4:a6:aa:ce:ac:3b:18:69:49:11:f2:51:df:fa:d3:f7:7c:f3:
37:33:b8:e1:c7:3c:be:7d:4d:d7:5d:b5:21:28:e3:6f:89:7c:
4a:ea:7a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 02:42:29 2026 by rpki-client